Dependency-Track
Know exactly what's in your software.
Dependency-Track ingests CycloneDX SBOMs and continuously tracks components across projects, matching them against multiple vulnerability intelligence sources and applying expression-based policies. It is free and open source, deployed via Docker Compose, and reports use by over 20,000 organizations.
12 alternatives to Dependency-Track
Ranked by how well each tool replaces Dependency-Track: shared features, audience, price and popularity.
- 54 out of 100 match$20/mo
- 50 out of 100 matchContact sales
Open-source observability platform that unifies session replays, logs, traces, metrics and
Covers 0 of 15 key features.
Free planOpen source48 out of 100 match$20/moOpen source vulnerability scanner and software composition analysis for secure software
Covers 0 of 15 key features.
Free plan47 out of 100 matchContact salesThe DEX engineering platform for organizations with complex IT environments.
Covers 0 of 15 key features.
47 out of 100 matchContact sales- 47 out of 100 match—
- 47 out of 100 matchFree
Real-time software supply chain security, SCA and dependency automation
Covers 0 of 15 key features.
Free planOpen source46 out of 100 matchFreeData center infrastructure management software for asset, capacity, change, power and 3D-3
Covers 0 of 15 key features.
46 out of 100 match$5.50/moContinuous Threat Exposure Management Platform built on its own internet index: 400M+ Dom,
Covers 0 of 15 key features.
45 out of 100 matchUsage-basedCompliance and security platform for managing audits and certifications.
Covers 1 of 15 key features.
45 out of 100 match—- 45 out of 100 matchFree